CVE-2014-9849
https://notcve.org/view.php?id=CVE-2014-9849
The png coder in ImageMagick allows remote attackers to cause a denial of service (crash). El codificador png en ImageMagick permite a atacantes remotos provocar una denegación de servicio (caída). • http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00002.html http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00009.html http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00011.html http://lists.opensuse.org/opensuse-security-announce/2016-07/msg00018.html http://www.openwall.com/lists/oss-security/2016/06/02/13 http://www.ubuntu.com/usn/USN-3131-1 https://bugzilla.redhat.com/show_bug.cgi?id=1343509 • CWE-400: Uncontrolled Resource Consumption •
CVE-2016-10252
https://notcve.org/view.php?id=CVE-2016-10252
Memory leak in the IsOptionMember function in MagickCore/option.c in ImageMagick before 6.9.2-2, as used in ODR-PadEnc and other products, allows attackers to trigger memory consumption. La pérdida de memoria en la función IsOptionMember en MagickCore/option.c en ImageMagick en versiones anteriores a 6.9.2-2, tal como se utiliza en ODR-PadEnc y otros productos, permite a atacantes desencadenar el consumo de memoria. • http://git.imagemagick.org/repos/ImageMagick/commit/6790815c75bdea0357df5564345847856e995d6b http://www.debian.org/security/2017/dsa-3808 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=857426 https://github.com/Opendigitalradio/ODR-PadEnc/issues/2 • CWE-399: Resource Management Errors •
CVE-2017-6497
https://notcve.org/view.php?id=CVE-2017-6497
An issue was discovered in ImageMagick 6.9.7. A specially crafted psd file could lead to a NULL pointer dereference (thus, a DoS). Ha sido descubierto un problema en ImageMagick 6.9.7. Un archivo psd especialmente manipulado, podría conducir a una referencia de puntero NULL (por lo tanto, un DoS). • http://www.securityfocus.com/bid/96594 https://bugs.debian.org/856882 https://github.com/ImageMagick/ImageMagick/commit/7f2dc7a1afc067d0c89f12c82bcdec0445fb1b94 • CWE-476: NULL Pointer Dereference •
CVE-2017-6501
https://notcve.org/view.php?id=CVE-2017-6501
An issue was discovered in ImageMagick 6.9.7. A specially crafted xcf file could lead to a NULL pointer dereference. Ha sido descubierto un problema en ImageMagick 6.9.7. Un archivo cxf especialmente manipulado podría conducir a una referencia de puntero NULL. • http://www.securityfocus.com/bid/96589 https://bugs.debian.org/856881 https://github.com/ImageMagick/ImageMagick/commit/d31fec57e9dfb0516deead2053a856e3c71e9751 • CWE-476: NULL Pointer Dereference •
CVE-2017-6500
https://notcve.org/view.php?id=CVE-2017-6500
An issue was discovered in ImageMagick 6.9.7. A specially crafted sun file triggers a heap-based buffer over-read. Ha sido descubierto un problema en ImageMagick 6.9.7. Un archivo sun especialmente manipulado desencadena una sobre lectura de búfer basada en memoria dinámica. • http://www.debian.org/security/2017/dsa-3808 http://www.securityfocus.com/bid/96592 https://bugs.debian.org/856879 https://github.com/ImageMagick/ImageMagick/commit/3007531bfd326c5c1e29cd41d2cd80c166de8528 https://github.com/ImageMagick/ImageMagick/issues/375 https://github.com/ImageMagick/ImageMagick/issues/376 • CWE-125: Out-of-bounds Read •